Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
File: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft (raw, json)
Hash identifier: Vl5CDQhtvRBbi++12M44DMe/QoAH+xkP1TBOc2Oqox8=
Subject key identifier: 6C:8D:C9:24:BA:E2:12:12:5F:98:AC:46:6A:50:89:39:BA:7B:4C:75
Authority key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
Certificate issuer: /CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Certificate serial: 01A0E7AF3DA3EB4C80822D816D72F5378A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
Manifest number: 0274
Signing time: Mon 28 Sep 2026 11:03:36 +0000
Manifest this update: Mon 28 Sep 2026 11:03:36 +0000
Manifest next update: Tue 29 Sep 2026 11:03:36 +0000
Files and hashes: 1: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl (hash: MuBFpPqtexotANYpRViVmSRU6/Jwc++2GTwjnEYk4Ts=)
2: cQwjsCo9gkIA6iPJNtB7F11xkU0.roa (hash: v4xVa178+XaCuwEjmAANdS9KMbdbv5lyk3k50cP3nxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:3d:a3:eb:4c:80:82:2d:81:6d:72:f5:37:8a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dffcb87c2246fa389c428e0f153edf259e5450f
Validity
Not Before: Sep 28 11:03:36 2026 GMT
Not After : Sep 29 11:03:36 2026 GMT
Subject: CN=6c8dc924bae212125f98ac466a508939ba7b4c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:0f:73:70:0b:38:25:fa:8e:ab:1a:45:0e:
bf:63:7e:a3:a6:20:83:c8:d6:57:6e:a4:71:11:c0:
4a:22:61:47:78:fd:02:95:67:ec:4f:4e:15:5a:c9:
4f:b5:aa:e5:5d:a0:f8:77:2d:62:98:fb:0b:2d:14:
b5:46:2a:3e:5e:e5:2e:08:09:74:67:6d:18:46:11:
43:31:b6:84:23:9c:a7:1e:96:ab:f1:f0:2c:95:05:
d2:2e:53:a4:30:61:89:b9:64:9d:10:7d:4d:5a:a4:
63:cb:e8:2a:22:72:5f:ed:4a:6d:f6:6a:93:f4:c6:
86:38:b8:50:d6:09:cf:21:58:6f:a3:f8:86:eb:62:
5c:e2:fb:cb:61:db:c3:5d:46:3d:df:2a:27:8f:cb:
f4:61:85:79:dc:1f:4a:e2:fe:ab:e4:f6:b2:9c:7d:
90:26:ad:0f:f9:fe:21:57:4c:48:29:fc:91:c9:6e:
89:9c:ae:29:ce:4d:08:b6:98:de:1d:49:c3:bf:0b:
e0:77:04:06:43:8e:bf:33:92:6a:f4:66:6f:e0:7d:
68:a5:b5:31:61:c0:22:eb:7e:4d:07:c3:90:b4:ad:
87:ef:66:1a:2b:c4:31:78:ed:9a:9c:de:17:f1:cb:
2d:d0:26:e3:c4:91:7b:ff:95:69:9b:03:24:91:13:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:C9:24:BA:E2:12:12:5F:98:AC:46:6A:50:89:39:BA:7B:4C:75
X509v3 Authority Key Identifier:
keyid:6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e5:bd:2d:32:f1:74:3c:a7:81:4e:ae:a0:0a:36:b9:40:ff:
a5:04:c6:21:27:50:23:d6:17:fb:c0:f5:8c:a1:75:3c:56:34:
61:ee:e9:71:0b:bd:e2:32:cd:07:cf:49:62:a2:e5:c1:c4:b6:
93:2b:c2:94:d7:9b:e0:85:93:da:f8:d5:26:b8:25:6c:97:c4:
a8:16:2f:4f:db:9b:6d:32:61:94:51:46:43:45:3d:fa:d9:aa:
4a:ab:c0:c7:8b:13:98:25:fd:c4:fa:2f:c6:86:dc:6f:54:3b:
8c:be:b9:f9:41:f8:76:66:d7:f3:94:a2:4c:90:ae:f8:df:fb:
28:13:35:fa:fc:3e:94:49:f8:08:89:40:aa:b3:25:09:89:6e:
b0:66:f7:a8:97:0d:72:43:73:83:98:7c:ee:a2:f1:b0:9b:ab:
11:0b:6e:b3:39:a2:6f:dc:01:15:89:c6:ea:97:2b:11:b1:47:
25:8e:3d:de:b3:67:dc:a7:d6:07:b4:d3:de:94:d7:49:60:b4:
10:90:a8:30:6b:cf:9d:b1:29:bc:66:9a:00:3f:39:5e:f7:08:
25:04:9a:cb:61:b5:ce:dd:3c:4c:37:a9:90:11:7a:5b:68:2a:
33:8e:9a:ca:4b:d4:85:10:26:a5:f5:13:11:e3:c1:a3:43:bc:
7d:59:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:24:45 2026 by rpki-client